1. Click Firewall
2. Click Virtual IP
3. Click Create New

Name: Any name you want
Mapped IP Address/Range: IP of remote computer you want to connect to
External IP Address/Range: IP of local computer you will be connecting from (0.0.0.0 for all)
PortForwarding: Checked
Protocol: TCP
External Service Port: Any not being used
Map to Port: 3389 for RDP

fortiRDP.JPG

4. Click Policy
5. Choose external ---> internal (outside to inside)
6. Click Create New
Source Interface/Zone: wan or External
Source Address: All
Destination Interface/Zone: Internal
Destination Address: Name Used for the virtual IP created
Schedule: Always
Service: Any
Action: Accept